Lucene search
+L

109 matches found

OSV
OSV
•added 2019/02/25 4:29 a.m.•40 views

UBUNTU-CVE-2019-9113

Ming aka libming 0.4.8 has a NULL pointer dereference in the function getString in the decompile.c file in libutil.a...

8.8CVSS5.8AI score0.01404EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2019/02/25 4:29 a.m.•46 views

CVE-2019-9113

Ming aka libming 0.4.8 has a NULL pointer dereference in the function getString in the decompile.c file in libutil.a...

8.8CVSS7.2AI score0.01404EPSS
SaveExploits1References2
Mend
Mend
•added 2019/02/25 4:00 a.m.•2 views

CVE-2019-9113

Ming aka libming 0.4.8 has a NULL pointer dereference in the function getString in the decompile.c file in libutil.a...

8.8CVSS0.01404EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/02/25 12:00 a.m.•8 views

CVE-2019-9113: NULL Pointer Dereference

Ming aka libming 0.4.8 has a NULL pointer dereference in the function getString in the decompile.c file in libutil.a...

8.8CVSS5.6AI score0.01404EPSS
SaveExploits1References2
CNVD
CNVD
•added 2019/02/25 12:00 a.m.•48 views

libming getString() function null pointer dereference vulnerability

libming is a Flash SWF output library written in C. It can be used as a library to export Flash SWF files to other languages. A null pointer dereference vulnerability exists in the getString function in decompile.c in libutil.a in libming 0.4.8. No detailed vulnerability details are provided at...

8.8CVSS6.9AI score0.01404EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2019/02/25 12:00 a.m.•3 views

PT-2019-19367

Name of the Vulnerable Software and Affected Versions Ming aka libming version 0.4.8 Description The issue is related to a NULL pointer dereference in the getString function, located in the decompile.c file within libutil.a. Recommendations For Ming aka libming version 0.4.8, consider avoiding th...

8.8CVSS0.01404EPSS
SaveExploits1References6
Prion
Prion
•added 2018/12/28 4:29 p.m.•31 views

Design/Logic Flaw

A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c...

4.3CVSS6.2AI score0.0202EPSS
SaveExploits1References4Affected Software2
Mend
Mend
•added 2018/12/28 4:00 a.m.•1 views

CVE-2018-20551

A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c...

7.1CVSS0.0202EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2018/12/28 4:00 a.m.•60 views

CVE-2018-20551

A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c...

6.6AI score0.0202EPSS
SaveExploits1References4
OSV
OSV
•added 2018/12/28 12:00 a.m.•10 views

UBUNTU-CVE-2018-20551

A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c...

6.5CVSS6.7AI score0.0202EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2018/12/28 12:00 a.m.•38 views

CVE-2018-20551

A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c...

6.5CVSS6.8AI score0.0202EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2018/12/28 12:00 a.m.•2 views

PT-2018-2760

Name of the Vulnerable Software and Affected Versions Poppler version 0.72.0 Description The issue is related to insufficient input validation in the Poppler library, which can lead to a denial of service. Specifically, it involves the construction of invalid rich media annotation assets in the...

7.8CVSS0.0211EPSS
SaveExploits3References148
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/28 12:00 a.m.•5 views

CVE-2018-20551: Improper Input Validation

A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c...

6.5CVSS7.4AI score0.0202EPSS
SaveExploits1References2
CNVD
CNVD
•added 2018/12/28 12:00 a.m.•16 views

Poppler Object::getString reachable assertion vulnerability

Poppler is based on xpdf-3.0 code base PDF rendering library. Poppler 0.72.0 exists Object::getString there is a reachable assertion vulnerability , the vulnerability stems from the Annot.c in the AnnotRichMedia class to build invalid rich media annotated assets , an attacker can use the...

6.5CVSS7.8AI score0.0202EPSS
SaveExploits1References1
OSV
OSV
•added 2018/11/06 5:29 p.m.•15 views

CVE-2018-9437

In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0...

5.5CVSS5.9AI score0.00884EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/06 12:00 a.m.•7 views

CVE-2018-9437: Out-of-bounds Read

In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0...

7.1CVSS6.6AI score0.00884EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/11/06 12:00 a.m.•3 views

PT-2018-19007

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 8.1 Description The issue is related to a possible out-of-bounds read in the getstring function of ID3.cpp due to a missing bounds check. This could lead to a remote denial of service, and no additional execution...

7.1CVSS0.00884EPSS
SaveExploits0References4
Veracode
Veracode
•added 2018/10/24 3:33 a.m.•19 views

Cross-Site Scripting (XSS)

angular-gettext is vulnerable to cross-site scripting. interpolationContext is passed to getString or getPlural functions in dist/angular-gettext.js and src/directive.js, which allows attackers to inject arbitrary Javascript code into a victim's browser when the attribute...

6.5AI score
SaveExploits0
CNVD
CNVD
•added 2018/07/06 12:00 a.m.•13 views

libming 'getString' function null pointer dereference vulnerability

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A security vulnerability exists in the 'getString' function of the decompile.c file in libming version 0.4.8. A remote attacker can exploit th...

6.5CVSS6.4AI score0.01456EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2018/07/05 2:29 p.m.•7 views

CVE-2018-13250

libming 0.4.8 has a NULL pointer dereference in the getString function of the decompile.c file, related to decompileSTRINGCONCAT. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file...

6.5CVSS5.6AI score0.01456EPSS
SaveExploits1References2
Rows per page
Query Builder